Updated WailingCrab malware loader ups stealth

The TA544 malware operation, also known as Zeus Panda or Bamboo Spider, has enhanced its advanced malware loader WailingCrab with an AES-encrypted backdoor. The updated malware, mostly utilized in shipping-themed email attacks, uses MQTT protocol for command-and-control communications and payload retrieval, offering increased stealth compared to the previous Discord-based download path. The attack’s primary communication starts with hacked websites, according to an IBM X-Force report.